{"report_id":"7b9eebd6-a1ff-47e2-856d-c70115cb1ffd","version":0,"status":"done","tags":[],"date":"2026-08-04T00:12:07Z","url":{"schema":"http","addr":"m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"m.dasartisanat.com/?show=goodluckyyds","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"title":"@","dom":{"size":943,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (709)","md5":"0b943320a5094c37c424a3c40e737ff5","sha1":"ea0ae32afa4906110b4bbd724d07fe19c30136ec","sha256":"909dc460baa054c3cf78b5a914e522f1380f59308630a0a38efc33724f595132","sha512":"840cf0cf5fce66abf9e8ddd2bdf9140baa2650e398755ab4dde777d547682d01e9921cf0eb73433bb4eb9030515a09fba227d8d0be060948a407de955415485e","ssdeep":"","tlshash":"e71144b3dc66e01d5131e274f0f8f91c89058515f7579c14adea35a84ecdb8898f34e8","dom_hash":"domhash7d3686a0f2233ad635679deb5036f957","first_seen":"2026-08-04T00:01:33.099898Z","last_seen":"2026-08-04T00:12:07.874882Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":0,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T00:12:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.dasartisanat.com","ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2018-12-01","domain_rank":0,"first_seen":"2026-08-04T00:01:31.782002Z","last_seen":"2026-08-04T00:01:31.782002Z","alert_count":7,"request_count":7,"received_data":38761,"sent_data":4076,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sadasd.king-pco.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-03-06","domain_rank":0,"first_seen":"2025-07-05T07:52:29.678614Z","last_seen":"2026-08-03T08:23:46.034466Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":474,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"eventHandler","is_inline":false,"md5":"24bb3103b67e0ef8e39cf44940c8a022","sha1":"c3cccff4051e52633d7b16c77ed060943ae92fa5","sha256":"7431ad12bf9a661dd2da57bb6ea493c6ec78847b471962f106d3bf2acf4b259a","sha512":"946a482684250501fd273dd45bebc83254ae7e512ba66ac7331f880c5d6ecc0aff1862685811ad30c2010d7f6e218b3a0cb7c40bbe1a4f6eb060bf1f3109bbee","ssdeep":"","tlshash":"ab4000003000000000000000000000003000000000000000000000000c0003000300c0","size":6,"data":"","first_seen":"2023-05-21T08:26:33Z","last_seen":"2026-08-04T00:13:49.937945Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/sttcs/stjs.js","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e38ecbad3610d3b26eb5ea8a0124e29","sha1":"68a1d61171aaf22541823fa497b6044beda7fcad","sha256":"9f36a526680c583409de678fe961815d2b4e0cd0302f29daacf28abea19d6a53","sha512":"0823da0fb6295b0078deea728eea979ab051f62098204b7ae6def062e15bde148b7a4ea0d726dbaa0a8130f7fde36bb93b5d5ac7f0ca115783ce07dddd7a0448","ssdeep":"","tlshash":"4211ceb14862a53c41209134b878e3ac3479c135fe379a24799e79395bddf488c69ed4","size":1002,"data":"","first_seen":"2026-02-13T09:48:24.785313Z","last_seen":"2026-08-04T00:13:49.93301Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/sttcs/v2/?channel=KB3\u0026ref=https://m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2e193b21764c990f68e53de7dddb13c","sha1":"87004e009bcf8f77c324be36ced409ac4a2a718f","sha256":"f4922122e867c4912168f9a702ad4aa52fffd23ebff41a039d794d59664bac82","sha512":"aa256e97542977e179158fed25cd43e02ef34ba0988c016c6ec67ed3485a865c21e3ba187ca09276436f1652ace49e4e019f78738ebf48ce18ce10af914fa3ca","ssdeep":"","tlshash":"a33196eb58a32bd4fc39d6cc2dd9a8f53106981b2ca120595fc334c2c28b9a7c47099c","size":1452,"data":"","first_seen":"2026-06-25T11:22:31.017922Z","last_seen":"2026-08-04T00:13:49.93423Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/sttcs/v2/?channel=KB3\u0026ref=https://m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"7956b51fc4132ded96c200d64401ae72","sha1":"a5d4a90c979dc095c97b9fbae3274c451b253cd6","sha256":"370fb9a3c53ba63df34d8f830c5b91da959503c27ad34a62ef3276121448329d","sha512":"c0db1a4f188ba6e4a8ad0eb0c7077d74033f4e3527b5e4e00a7d5828ee864b55c37088e9ac65082e88f9f12d933f48971dd2f0f37e7ee0afa1a7275b1ff99e6c","ssdeep":"","tlshash":"1711aa190cd5d03d55c45aceb1b7fb04a1dab346b9c0a8d242ac9c2c942aff02660e5d","size":1062,"data":"","first_seen":"2026-06-25T11:22:31.018835Z","last_seen":"2026-08-04T00:13:49.936036Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"m.dasartisanat.com/sttcs/v2/?channel=KB3\u0026ref=https://m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.dasartisanat.com/?show=goodluckyyds","date":"2026-08-04T00:11:44.843Z","timestamp":1785802304843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET /sttcs/v2/?channel=KB3\u0026ref=https://m.dasartisanat.com/ HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://m.dasartisanat.com/?show=goodluckyyds\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wtime=1785802300; wtoken=6e4bbdf0c57762288bfef8e711ba8719\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:44 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 27 Jun 2026 04:27:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3f514e-7c7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1991,"size_decoded":1412,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1473)","md5":"38bcba3bbd5ce73a570f645f759130a2","sha1":"623c7d0f40faa667a515daa8523d8902be39b8ec","sha256":"896982d1d67d0ca1261d4af12b537706ca41e350a167e464036741f0a20b338c","sha512":"6ab1be0dd2aa4a9b4fed311b7853a71754ecce06694f01abf9d3502501412ebbba8acbfe7e85d4fdf10039a594c9d3f841ba568069adb731338a5695ce0fb7eb","ssdeep":"","tlshash":"9941b6e788e29a94f974d29c2ce9f4a51106ac1b6c5510497ac321c9cfc7eabc8f35dc","first_seen":"2026-06-29T23:52:57.887711Z","last_seen":"2026-08-04T00:13:49.924505Z","times_seen":25,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sadasd.king-pco.com/v2/js/app.2ab7aa53.js","fqdn":"sadasd.king-pco.com","domain":"king-pco.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.dasartisanat.com/sttcs/v2/?channel=KB3\u0026ref=https://m.dasartisanat.com/","date":"2026-08-04T00:11:45.291Z","timestamp":1785802305291,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /v2/js/app.2ab7aa53.js HTTP/1.1\r\nHost: sadasd.king-pco.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.dasartisanat.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T13:03:25.639067Z","times_seen":17724863,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T00:11:38.767Z","timestamp":1785802298767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3454,"size_decoded":3581,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0a4e6542db4e00959cbb240dfa006a0e","sha1":"dca25e8792241b7e1827e0a0514233c9a80247e2","sha256":"b00fb03c3d3fad6c1f7bbe8191bd6ca28374439d902061d2b68900189eb867de","sha512":"18c466c29e97fe204be1a003ee8db9167ddb8abbaee2520590dfd0d6b85bfe62b958380e199fa950c5fb56379c36223bfc724952e798d079b29c375e58d1c911","ssdeep":"","tlshash":"6d61631a05a61505ba53b1e03fa6634c15a5c053d60bc92c398eb6e4cf8dbd107ff3e8","first_seen":"2026-08-04T00:12:07.87728Z","last_seen":"2026-08-04T00:12:07.87728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2016,"timings":{"blocked":0,"dns":198,"connect":1280,"send":0,"wait":267,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/favicon.ico","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.dasartisanat.com/","date":"2026-08-04T00:11:40.986Z","timestamp":1785802300986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.dasartisanat.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:41 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Tue, 24 Feb 2026 17:56:59 GMT\r\netag: \"699de66b-3aee\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":15360,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"143fd06e670559b0aca5850226a0610b","sha1":"b0487f9575d3cc5aa9f181abd3ec5d244785e847","sha256":"ba5c1f43717c593114ace2aeaf1dea066720342b67800390340e38265785c419","sha512":"58ba102658198d2bdfb4515252bba8963db5b2fc0da52f6677fefd8383a43c58e0788034c6760319329e6da81667fe154f7109931f25518e4648ee9e66735a50","ssdeep":"96:j8/siMeE3gpsiXWERTOPFltJaFkqttptXuvp6z4Llje:j8w3gpDRwvvwptev0v","tlshash":"0d6219809b286f16dba96979cdeea6e87230c9c8bf17431b1214f05f7c227409d87318","first_seen":"2023-09-29T21:20:30Z","last_seen":"2026-08-04T00:13:49.92305Z","times_seen":134,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/?show=goodluckyyds","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T00:11:43.997Z","timestamp":1785802303997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET /?show=goodluckyyds HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.dasartisanat.com/\r\nCookie: wtime=1785802300; wtoken=6e4bbdf0c57762288bfef8e711ba8719\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":468,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"23feef6c8115cef1ac9b86381c266208","sha1":"895db4f62e88c73fc92cbf6be5009cc4d23eb4fc","sha256":"ab881affc4ea48cb56eb0620baea2431faa1a86e13adcfd75fe324a0dbf3ad8b","sha512":"b365d69b3858fb5542bcd05dd7b1f188b9353677bf430db97bf84135c660a9719cb572315f61f04f62935046301b88487c4cc376bac070060f0a54e2682cb189","ssdeep":"","tlshash":"e5e0c6676c72400e100056a4c8e5f428dcc84206a342ecc038c0a0ac8fcdf8ce8a3698","first_seen":"2025-11-23T22:11:22.848274Z","last_seen":"2026-08-04T00:13:49.931452Z","times_seen":128,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/sttcs/stjs.js","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://m.dasartisanat.com/?show=goodluckyyds","date":"2026-08-04T00:11:44.319Z","timestamp":1785802304319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET /sttcs/stjs.js HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.dasartisanat.com/?show=goodluckyyds\r\nCookie: wtime=1785802300; wtoken=6e4bbdf0c57762288bfef8e711ba8719\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1002\r\nlast-modified: Wed, 25 Feb 2026 07:52:13 GMT\r\netag: \"699eaa2d-3ea\"\r\nexpires: Tue, 04 Aug 2026 12:11:44 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1002,"size_decoded":1354,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"9e38ecbad3610d3b26eb5ea8a0124e29","sha1":"68a1d61171aaf22541823fa497b6044beda7fcad","sha256":"9f36a526680c583409de678fe961815d2b4e0cd0302f29daacf28abea19d6a53","sha512":"0823da0fb6295b0078deea728eea979ab051f62098204b7ae6def062e15bde148b7a4ea0d726dbaa0a8130f7fde36bb93b5d5ac7f0ca115783ce07dddd7a0448","ssdeep":"","tlshash":"4211ceb14862a53c41209134b878e3ac3479c135fe379a24799e79395bddf488c69ed4","first_seen":"2026-02-13T09:48:24.785313Z","last_seen":"2026-08-04T00:13:49.93301Z","times_seen":86,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/sttcs/v2?channel=KB3\u0026ref=https://m.dasartisanat.com/","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://m.dasartisanat.com/?show=goodluckyyds","date":"2026-08-04T00:11:44.582Z","timestamp":1785802304582,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET /sttcs/v2?channel=KB3\u0026ref=https://m.dasartisanat.com/ HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.dasartisanat.com/?show=goodluckyyds\r\nCookie: wtime=1785802300; wtoken=6e4bbdf0c57762288bfef8e711ba8719\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://m.dasartisanat.com/sttcs/v2/?channel=KB3\u0026ref=https://m.dasartisanat.com/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T13:03:25.639067Z","times_seen":17724863,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"m.dasartisanat.com/favicon.ico","fqdn":"m.dasartisanat.com","domain":"dasartisanat.com","tld":"com"},"ip":{"addr":"156.254.169.222","port":443,"asn":142286,"as":"LUOGELANG FRANCE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://m.dasartisanat.com/?show=goodluckyyds","date":"2026-08-04T00:11:44.586Z","timestamp":1785802304586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dasartisanat.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 04:27:29 GMT","end":"Mon, 26 Oct 2026 04:27:28 GMT"},"fingerprint":{"sha1":"50:03:FB:59:23:45:CB:93:05:D5:67:B6:B6:87:E6:0F:B4:B5:83:6C","sha256":"C6:89:24:EE:62:98:62:29:8F:CA:71:AC:DE:2A:6C:1E:67:D4:6B:6A:01:B3:15:40:0A:D7:CB:86:74:7C:A4:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: m.dasartisanat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://m.dasartisanat.com/?show=goodluckyyds\r\nCookie: wtime=1785802300; wtoken=6e4bbdf0c57762288bfef8e711ba8719\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 00:11:44 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Tue, 24 Feb 2026 17:56:59 GMT\r\netag: \"699de66b-3aee\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":15360,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"143fd06e670559b0aca5850226a0610b","sha1":"b0487f9575d3cc5aa9f181abd3ec5d244785e847","sha256":"ba5c1f43717c593114ace2aeaf1dea066720342b67800390340e38265785c419","sha512":"58ba102658198d2bdfb4515252bba8963db5b2fc0da52f6677fefd8383a43c58e0788034c6760319329e6da81667fe154f7109931f25518e4648ee9e66735a50","ssdeep":"96:j8/siMeE3gpsiXWERTOPFltJaFkqttptXuvp6z4Llje:j8w3gpDRwvvwptev0v","tlshash":"0d6219809b286f16dba96979cdeea6e87230c9c8bf17431b1214f05f7c227409d87318","first_seen":"2023-09-29T21:20:30Z","last_seen":"2026-08-04T00:13:49.92305Z","times_seen":134,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"m.dasartisanat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
